We should use JKS truststore for Java instead PKCS12 as it does not need...

We should use JKS truststore for Java instead PKCS12 as it does not need trustStorePassword to be read

make-ca.sh-20170514

@@ -491,10 +491,10 @@ for tempfile in ${TEMPDIR}/certs/*.tmp; do
   if test "${satrust}x" == "Cx"; then
     # Java keystore
     if test "${WITH_JAVA}" == "1"; then
-      "${KEYTOOL}" -import -noprompt -alias "${certname}"   \
-                   -keystore "${TEMPDIR}/ssl/java/cacerts"  \
-                   -storepass 'changeit' -file tempfile.crt \
-      2>&1> /dev/null | \
+      "${KEYTOOL}" -import -noprompt -alias "${certname}"  \
+                   -keystore "${TEMPDIR}/ssl/java/cacerts" \
+                   -storepass 'changeit' -storetype JKS    \
+                   -file tempfile.crt 2>&1> /dev/null |    \
       sed -e 's@Certificate was a@A@' -e 's@keystore@Java keystore.@'
     fi
 
@@ -685,9 +685,10 @@ if test -d "${LOCALDIR}"; then
 
     # Install in Java keystore
     if test "${WITH_JAVA}" == "1" -a "${satrust}x" == "Cx"; then
-      "${KEYTOOL}" -import -noprompt -alias "${certname}"                  \
-                   -keystore "${DESTDIR}${KEYSTORE}"                       \
-                   -storepass 'changeit' -file "${cert}" 2>&1> /dev/null | \
+      "${KEYTOOL}" -import -noprompt -alias "${certname}" \
+                   -keystore "${DESTDIR}${KEYSTORE}"      \
+                   -storepass 'changeit' -storetype JKS   \
+                   -file "${cert}" 2>&1> /dev/null |      \
       sed -e 's@Certificate was a@A@' -e 's@keystore@Java keystore.@'
     fi